Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BC9CBDA92DE11EF9108DFAF762E951A.roa
File: 9BC9CBDA92DE11EF9108DFAF762E951A.roa (raw, json)
Hash identifier: 3vMbfoPvVoXNK//L1N7lbaYbUnzql8/RE2+pJ4KTF0o=
Subject key identifier: B4:1B:B2:10:17:29:30:E8:8E:94:15:42:2B:F9:C3:30:9E:6D:77:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01023C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BC9CBDA92DE11EF9108DFAF762E951A.roa
Signing time: Fri 25 Oct 2024 14:37:07 +0000
ROA not before: Fri 25 Oct 2024 14:37:03 +0000
ROA not after: Sun 01 Dec 2024 14:37:03 +0000
asID: 48031
IP address blocks: 154.222.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66108 (0x1023c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:37:03 2024 GMT
Not After : Dec 1 14:37:03 2024 GMT
Subject: CN=671bad12-70ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:c4:ac:1f:39:82:bb:75:e8:bd:62:9b:78:
82:0a:82:ff:c1:1f:5b:a3:af:f2:ab:60:5b:59:8a:
2e:44:a1:52:bc:33:7e:53:cf:ee:b4:c3:7e:18:63:
0f:1c:9b:9e:8a:37:c4:b2:28:20:de:ee:80:c9:40:
79:b0:00:61:fe:02:1e:85:8f:0d:7c:e9:dc:75:b6:
34:48:b3:dc:92:bf:ff:5a:2c:78:78:cc:25:fb:2c:
a4:30:b0:47:d2:f7:ec:75:37:68:07:91:a3:be:5e:
a9:ae:75:4f:de:d4:4d:52:93:f3:87:7a:04:46:cb:
b4:2a:75:79:c0:5a:22:ba:54:a2:28:a2:08:de:38:
ee:70:91:f9:a3:f3:7c:3c:c9:0e:8a:df:28:42:ff:
be:93:1d:a8:81:3c:a4:cc:12:a7:0a:03:a4:4a:c8:
88:10:18:22:01:65:7c:f0:9f:ca:4a:a8:d4:e3:a7:
12:8e:fe:bd:cd:95:bb:e1:a3:8f:b6:e9:ad:c5:1f:
22:88:bb:ca:4c:32:bf:1b:b4:86:f6:0e:d4:88:5f:
79:cb:d4:94:dd:cb:85:00:f2:a2:03:e1:9c:2c:0c:
b5:1b:a1:11:9a:cc:c3:07:e9:d0:f5:17:b1:30:52:
16:fb:5a:68:67:7e:7f:f3:e7:ff:a3:dd:7d:02:d4:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1B:B2:10:17:29:30:E8:8E:94:15:42:2B:F9:C3:30:9E:6D:77:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9BC9CBDA92DE11EF9108DFAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:63:5e:2a:25:93:c5:e0:67:0f:6f:0e:31:07:b1:9e:ef:a0:
07:04:9c:fd:11:20:7f:c6:ad:1b:92:08:28:4b:6f:fe:91:3b:
23:18:80:5e:c2:ca:6e:78:c2:7f:37:fe:fa:bb:57:a2:68:ab:
e0:00:04:b7:55:08:32:3d:7a:d8:6c:e8:63:d5:34:2c:07:8d:
65:34:e2:6d:63:96:36:ce:ab:1a:cb:9f:0f:55:d5:6c:0d:d6:
4a:85:f6:cf:e4:ef:cc:70:12:0c:17:90:45:59:f4:35:62:53:
44:67:6a:cd:54:88:a3:c6:21:db:a9:ef:4d:61:80:7c:cd:df:
f9:bf:d9:ac:f2:bd:17:2c:5b:08:86:79:33:94:e6:92:ac:f4:
15:be:fe:28:d5:ca:91:cb:99:f7:9d:a9:5c:bb:af:1c:25:88:
b5:8b:51:49:00:2c:2f:11:71:7e:3a:85:c6:b6:c5:c8:4f:15:
59:d2:7b:0e:8f:c5:6e:44:82:d5:45:4d:fc:4a:57:ac:2a:5d:
20:93:94:e4:a5:43:4b:65:3e:61:90:5d:19:32:4d:a1:8c:82:
91:d4:05:5f:e5:52:23:17:99:42:20:38:7a:7a:d9:39:cd:1a:
f3:d0:0b:52:5e:7a:83:e8:c2:70:eb:44:65:fe:09:1b:8f:0f:
f7:b2:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:17 2024 by rpki-client on console-fra.rpki-client.org